fix: ensure resource owner in update human profile (#6253)

(cherry picked from commit 13e284dd56)
This commit is contained in:
Livio Spring
2023-07-24 15:38:31 +02:00
parent fa7f139645
commit bdecf90d6e
2 changed files with 3 additions and 3 deletions
+1 -1
View File
@@ -421,7 +421,7 @@ func (s *Server) GetHumanProfile(ctx context.Context, req *mgmt_pb.GetHumanProfi
}
func (s *Server) UpdateHumanProfile(ctx context.Context, req *mgmt_pb.UpdateHumanProfileRequest) (*mgmt_pb.UpdateHumanProfileResponse, error) {
profile, err := s.command.ChangeHumanProfile(ctx, UpdateHumanProfileRequestToDomain(req))
profile, err := s.command.ChangeHumanProfile(ctx, UpdateHumanProfileRequestToDomain(req, authz.GetCtxData(ctx).OrgID))
if err != nil {
return nil, err
}